CopperTheory privacy

Privacy Policy

This global policy explains what personal information CopperTheory collects, why we use it, when it may be shared and how customers in the United States and other countries can exercise applicable privacy rights or make a complaint.

Last updated: 30 July 2026

Privacy in plain English

We collect the information needed to run the store, process and deliver orders, provide support, improve the website and—where permitted—send product and routine updates. We do not receive or store your complete payment-card details. Those are handled by the payment providers available through Shopify checkout.

1. Who we are

CopperTheory is operated under the registered Australian business name copper theory (styled as “CopperTheory”) by Mounir Khalil, an individual/sole trader, ABN 30 659 443 705, with main business location in Victoria 3082, Australia. CopperTheory operates through shopcoppertheory.com and serves customers in the United States and other countries and regions worldwide. In this policy, “CopperTheory”, “we”, “us” and “our” refer to Mounir Khalil trading under the CopperTheory business name.

This policy applies to visitors and customers worldwide. Privacy rights differ by location. Where applicable privacy laws—including United States state privacy laws, European Union or European Economic Area data-protection laws, United Kingdom data-protection laws, Australian privacy laws or other local requirements—apply to a request or activity, we handle it in accordance with those applicable requirements.

2. Personal information we collect

Depending on how you interact with CopperTheory, we may collect and hold:

  • your name, email address, phone number and billing or delivery address;
  • order details, products purchased, returns, refunds, delivery status and support history;
  • account, enquiry, review, survey, competition or newsletter information you choose to provide;
  • payment status and transaction references supplied by our payment providers, but not your complete card number;
  • website and device information such as IP address, browser, device type, cookie identifiers, pages viewed, links used and approximate location derived from technical data;
  • marketing preferences and information about how you interact with our emails, advertisements and website; and
  • any other information you voluntarily give us when contacting support or communicating with CopperTheory.

We do not normally need sensitive information. Please do not send health information or other sensitive information unless it is genuinely necessary for your enquiry.

3. How we collect and hold information

We usually collect personal information directly from you when you place an order, create or use a customer account, contact us, submit a review, join our mailing list, enter a promotion or otherwise use the website.

Some information is collected automatically through Shopify, cookies and connected store services when you browse or interact with the site. We may also receive information from payment providers, fulfilment partners, warehouses, couriers, review tools, marketing platforms and customer-support services where necessary to operate the store.

Personal information is held using Shopify and other service providers that support ecommerce, payment processing, fulfilment, delivery, communications, analytics, advertising, reviews, fraud prevention and customer support.

4. Why we collect and use personal information

We may collect, hold, use and disclose personal information to:

  • process payments, confirm orders, arrange fulfilment and deliver purchases;
  • provide tracking, order updates, returns, refunds and customer support;
  • respond to product, routine, shipping or account enquiries;
  • detect or prevent fraud, misuse, security incidents and payment disputes;
  • operate, troubleshoot, measure and improve the website, products and customer experience;
  • display and manage customer reviews and feedback;
  • send service messages and, where permitted, marketing communications and offers;
  • measure advertising and understand how customers find and use CopperTheory;
  • comply with legal, tax, accounting, consumer-protection and regulatory obligations; and
  • establish, exercise or defend legal claims.

Where practical, you may contact us without identifying yourself. Identification is usually required when we need to find an order, process a refund, correct account information or verify that a privacy request relates to you.

5. When we share personal information

We may disclose personal information only where reasonably necessary to operate CopperTheory or where authorised or required by law. Recipients may include:

  • Shopify and connected ecommerce applications;
  • payment processors, banks and fraud-prevention providers;
  • third-party logistics providers, warehouses, couriers, postal services and customs authorities;
  • email, SMS, advertising, analytics, review, tracking and customer-support providers;
  • professional advisers, insurers, auditors, regulators, courts and law-enforcement agencies where appropriate; and
  • a purchaser or adviser involved in a proposed sale, restructuring or transfer of the business, subject to appropriate confidentiality arrangements.

We do not sell personal information to third parties as a standalone product.

6. International processing and cross-border transfers

CopperTheory serves customers worldwide and uses ecommerce, technology, payment, fulfilment, communication, analytics and delivery providers that may process or store information in a country different from the country where you live.

Depending on the service, fulfilment route and delivery destination, processing may occur in countries including the United States, Canada, Australia, China and Hong Kong, as well as other countries where couriers, payment providers, cloud services, advertising platforms or recipients operate. Provider locations can change, so this list may not be exhaustive.

Where applicable law requires safeguards for cross-border transfers or the use of international service providers, we take reasonable steps appropriate to the circumstances and the services involved.

7. Cookies, analytics and marketing

Our website and connected services use cookies and similar technologies to keep the store functioning, remember selections, maintain cart and checkout sessions, prevent fraud, understand website performance and measure marketing.

You can restrict cookies through your browser or device settings, although parts of the store—including cart, checkout, login and preference functions—may not work correctly.

Marketing communications

If you subscribe to CopperTheory updates, we may send product launches, offers and routine education. You can unsubscribe using the link in a marketing email or contact us. Unsubscribing from marketing does not stop essential messages about an order or customer-service request.

Advertising choices

Advertising and analytics providers may use cookies or similar identifiers to measure campaigns and show more relevant advertising, subject to their settings and applicable law. You can adjust browser, device and platform advertising preferences.

8. Security and retention

We use reasonable administrative, technical and organisational measures designed to protect personal information. No internet transmission or storage system is completely secure, so we cannot guarantee absolute security.

We retain personal information for as long as reasonably needed for the purpose it was collected, including order fulfilment, customer support, fraud prevention, disputes and legal, tax or accounting obligations. When information is no longer required, we take reasonable steps to delete, destroy or de-identify it, subject to lawful retention requirements and routine backup processes.

9. Your privacy rights

Depending on where you live and which privacy law applies, you may have rights to request access to or confirmation of the personal information we hold about you, correction of inaccurate information, deletion, a portable copy, restriction or objection to certain processing, or withdrawal of consent where processing relies on consent.

Residents of California and certain other United States states may also have rights, where applicable, to know the categories or specific pieces of personal information collected, request correction or deletion, opt out of sale, sharing or targeted advertising, limit certain uses of sensitive personal information, and exercise privacy rights without unlawful discrimination. CopperTheory does not sell personal information for money. Some analytics or advertising activities may be treated as “sharing”, “sale” or targeted advertising under particular United States state laws even when no money changes hands.

Residents of the European Union, European Economic Area or United Kingdom may have additional rights under applicable data-protection law, including access, rectification, erasure, restriction, objection and data portability.

Send a request to info@shopcoppertheory.com or use our Contact Us page. Include “Privacy Request” in the subject line. We may need to verify your identity and, where permitted, the authority of an authorised agent before responding. Rights may be limited by lawful exceptions, including recordkeeping, fraud prevention, security, tax, accounting or legal-obligation requirements.

10. Privacy complaints

If you believe CopperTheory has mishandled your personal information, contact us in writing with enough detail for us to investigate. We will acknowledge and assess the complaint and respond within the timeframe required by applicable law or, where no specific timeframe applies, within a reasonable period.

If you are not satisfied after giving us a reasonable opportunity to respond, you may be able to contact the privacy or consumer-protection regulator in your jurisdiction. Depending on your location, this may include a United States state attorney general or privacy authority, a European Union or European Economic Area supervisory authority, the United Kingdom Information Commissioner’s Office, the Office of the Australian Information Commissioner, or another applicable regulator.

Additional information

Children

The CopperTheory store is not directed to children under 16, and we do not knowingly seek to collect personal information from children. If you believe a child has provided personal information, contact us so we can review the situation.

Third-party websites

Our site may link to third-party websites or services. Their privacy practices are controlled by them, not CopperTheory, and you should review their policies before providing information.

Changes to this policy

We may update this policy when our products, systems, providers or legal obligations change. The latest version will be published at this URL with an updated date.

11. Contact CopperTheory

Business: copper theory, operated by Mounir Khalil (individual/sole trader)

ABN: 30 659 443 705

Main business location: Victoria 3082, Australia

Email: info@shopcoppertheory.com

Online: Contact Us

For privacy requests, include “Privacy Request” in the subject line and describe the right or concern involved and the country or United States state where you live.

COPPERTHEORY IN CA

Shopping CopperTheory in Canada

CopperTheory—also written as Copper Theory—is an Australian-owned GHK-Cu skincare, hair care and scalp care brand that ships worldwide. This storefront is set for Canada and displays prices in Canadian dollars (CAD).

Does CopperTheory ship to Canada?

Yes. CopperTheory ships to Canada through its international fulfilment network. Delivery options, charges and the final order total are confirmed at checkout.

What currency will I pay in?

Product prices on this market are shown in Canadian dollars (CAD). Your checkout keeps the selected market and currency together.

Are price and availability localised?

Yes. Shopify Markets applies the price, currency and product availability configured for Canada. These can differ from another country’s storefront.